Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA3BE358C32011EFB6CC5358762E951A.roa
File: EA3BE358C32011EFB6CC5358762E951A.roa (raw, json)
Hash identifier: Ij/liRdjD798fv0PsX0JcZbSaTahHbirBuXSdKviwig=
Subject key identifier: B6:DC:9B:54:18:9E:6D:F6:AD:5B:B8:70:37:34:7A:AF:D5:F1:AC:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA3BE358C32011EFB6CC5358762E951A.roa
Signing time: Thu 26 Dec 2024 00:32:41 +0000
ROA not before: Thu 26 Dec 2024 00:00:37 +0000
ROA not after: Wed 10 Dec 2025 00:00:37 +0000
asID: 984
IP address blocks: 156.228.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59935 (0xea1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:37 2024 GMT
Not After : Dec 10 00:00:37 2025 GMT
Subject: CN=676ca429-a92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5b:a9:8b:60:04:75:f7:9b:f8:c1:37:2b:0b:
a2:aa:7e:29:5e:e5:b5:fa:e6:3b:fd:94:a8:9f:0f:
62:b9:29:ea:43:de:64:fc:c3:9d:4b:0f:58:2c:53:
d2:40:d9:b4:26:23:44:24:4e:9d:53:85:cd:83:37:
ee:c2:9d:15:44:e2:4a:6b:92:74:7e:2d:ab:63:d1:
c2:94:32:da:46:0c:1b:fa:07:d5:92:15:d9:c3:8f:
ec:fa:2d:40:4b:d4:a9:8a:60:a4:9a:ae:1e:15:47:
79:8c:4f:d1:91:29:0b:a5:db:9d:03:31:fd:4d:67:
5a:46:ae:bb:fc:4c:b5:d8:69:9e:68:e6:08:cc:a8:
06:c0:15:2f:b6:50:ad:42:bd:ef:69:1a:e5:fd:19:
17:e7:14:10:62:79:b1:e8:3c:cd:76:2b:f5:16:0c:
df:08:21:21:8a:01:5d:99:f8:d8:d5:52:4c:84:16:
56:c2:a1:ec:64:42:d1:cc:e2:41:3f:99:b8:cf:73:
d8:5a:fe:6f:5f:6e:bb:28:ac:b5:03:8f:c7:78:48:
5d:03:a5:a2:f0:34:fc:a4:3d:bd:83:6d:88:dc:23:
13:6c:9f:56:1b:b1:5e:57:21:df:3d:7c:e3:81:9b:
91:c7:68:52:bd:7b:07:ca:10:77:b8:a3:83:ff:d2:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DC:9B:54:18:9E:6D:F6:AD:5B:B8:70:37:34:7A:AF:D5:F1:AC:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA3BE358C32011EFB6CC5358762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.224.0/24
Signature Algorithm: sha256WithRSAEncryption
00:73:23:61:65:a3:94:4d:a3:c7:6a:b8:9a:06:f8:22:ce:61:
37:5a:95:d7:3c:34:99:e3:9b:ed:47:f6:31:db:85:82:60:b9:
78:cc:60:ee:73:f7:30:45:57:07:78:ce:be:c0:8c:03:4a:01:
ea:dc:d0:ba:11:b6:53:b6:06:e6:b0:e1:86:9d:1d:2a:52:82:
4b:5c:43:9c:c8:8b:68:77:2f:05:27:44:ca:6d:69:6a:97:35:
52:4e:8e:23:60:87:f3:90:89:62:94:c6:1e:01:b7:18:eb:4e:
19:4c:65:30:69:09:23:e4:02:64:6d:ca:ff:61:b3:6d:40:92:
5c:0e:ec:b2:54:2e:0d:ee:30:1e:c1:cd:57:c8:c2:83:e8:60:
51:2f:e5:03:10:81:29:f4:84:a3:45:64:cc:91:8b:83:b3:70:
45:1a:21:77:3d:98:2e:0e:ba:7d:1f:0a:cf:b8:5f:f2:34:26:
d9:93:9b:0b:ca:3d:62:6c:6d:cb:ec:24:1d:c8:be:1c:65:d1:
f7:9b:e2:57:d0:8b:5e:6b:d9:90:91:ee:82:cc:ec:48:5e:2d:
82:50:a8:7a:28:33:ea:4d:70:cb:98:d9:62:77:fe:aa:f7:66:
ba:64:54:99:d2:a5:0c:6b:7a:e3:70:ac:35:cc:e7:41:f5:4b:
22:fe:41:48
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOofMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDAwMDM3WhcNMjUxMjEwMDAwMDM3WjAYMRYw
FAYDVQQDEw02NzZjYTQyOS1hOTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7Fupi2AEdfeb+ME3Kwuiqn4pXuW1+uY7/ZSonw9iuSnqQ95k/MOdSw9Y
LFPSQNm0JiNEJE6dU4XNgzfuwp0VROJKa5J0fi2rY9HClDLaRgwb+gfVkhXZw4/s
+i1AS9SpimCkmq4eFUd5jE/RkSkLpdudAzH9TWdaRq67/Ey12GmeaOYIzKgGwBUv
tlCtQr3vaRrl/RkX5xQQYnmx6DzNdiv1FgzfCCEhigFdmfjY1VJMhBZWwqHsZELR
zOJBP5m4z3PYWv5vX267KKy1A4/HeEhdA6Wi8DT8pD29g22I3CMTbJ9WG7FeVyHf
PXzjgZuRx2hSvXsHyhB3uKOD/9JEfQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLbc
m1QYnm32rVu4cDc0eq/V8ax8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQTNCRTM1OEMzMjAxMUVGQjZDQzUzNTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOTgMA0GCSqGSIb3DQEBCwUA
A4IBAQAAcyNhZaOUTaPHariaBvgizmE3WpXXPDSZ45vtR/Yx24WCYLl4zGDuc/cw
RVcHeM6+wIwDSgHq3NC6EbZTtgbmsOGGnR0qUoJLXEOcyItody8FJ0TKbWlqlzVS
To4jYIfzkIlilMYeAbcY604ZTGUwaQkj5AJkbcr/YbNtQJJcDuyyVC4N7jAewc1X
yMKD6GBRL+UDEIEp9ISjRWTMkYuDs3BFGiF3PZguDrp9HwrPuF/yNCbZk5sLyj1i
bG3L7CQdyL4cZdH3m+JX0Itea9mQke6CzOxIXi2CUKh6KDPqTXDLmNlid/6q92a6
ZFSZ0qUMa3rjcKw1zOdB9Usi/kFI
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:35 2025 by rpki-client